The GO 2026 app is built and maintained by Jesus Youth International ("we", "us"), the organiser of GO — the Jesus Youth International Conference 2026 (20–25 October 2026, Rome). We are the controller responsible for the personal data processed in this app.
How to delete your account and your data is explained on our Data Deletion page. For any question about your data, write to jygermany@jesusyouth.org.
Account data — your email address and password, managed through Google Firebase Authentication. We also store your display name (first and last name) and, if you add one, a profile photo. The photo is kept in Firebase Cloud Storage.
Guest mode — you can look around the app without an account. Guest sign-in is anonymous and stores no personal data about you.
Registration is not self-service. The conference team enters your registration for you: names, date of birth or age, family members, email address, phone number and country. Your account is linked to that registration through your verified email address.
Conference profile — your category (team, bishop, priest, nun, religious, lay or pilgrim), your accommodation (building and room), an emergency contact entered by the team, your role in the app (pilgrim, volunteer or admin), the volunteer groups you belong to, your cluster (small group) and, for speakers, the link to your speaker profile.
Transport — the buses the conference team assigns you and the people on your registration to (the trip, the bus and the seat). Everyone on a registration sees these for each other, and volunteers see who is on each bus. A copy is kept on your device so it can be shown without a connection, and is removed when you sign out.
Family registrations — the main registrant can see the details of the people on their registration (name, gender, adult or child, country, WhatsApp number and email address) and give a member an email address in the app.
The app holds no payment or financial data. Registration fees are handled separately by the organiser.
If you registered but your email address is not found when you sign up, you can send a verification request from the sign-up screen. We store the full name, country and email address you enter, and the email address that was not found, so that the conference team can find your registration and email you. A request is kept for up to 90 days and is deleted together with your account.
Seat reservations — when you book a place in a parallel session, we store that choice for each participant of your registration.
Check-in — when a volunteer scans your QR code, we store your user ID, the time and which volunteer scanned it.
Push notifications — as soon as you sign in on a device, a Firebase Cloud Messaging device token is stored on your profile. We use it to send you announcements from the conference team.
Group chat (Community, Cluster and Volunteers) — your messages, including any image you attach, are stored together with your display name and profile photo, and are visible to the members of that room. You can delete your own messages at any time; admins can remove any message. Chat images are stored in Firebase Cloud Storage.
Reporting a chat message — when you report a message in the Community or Cluster chat, we store your report (the reason you chose, any note you add and the time) under your internal user ID, together with a copy of the reported message, for the conference team to review. If one of your own messages is reported, that copy is kept with the reports, and the message may be taken out of the chat (automatically once three people have reported it) and held for the team until they restore or delete it. Your reports, and the reports of your messages, are deleted together with your account.
Live Q&A — questions are stored without your name. We keep only an internal user ID, so that you can delete your own question, and the number of people who added a "me too". The text of the question is sent to Google Gemini on Vertex AI (Google Cloud, acting as our processor) for one purpose: to detect questions that duplicate one already asked. Under the Vertex AI terms Google does not use it to train its models. Speakers and volunteers see the questions during the session.
Session feedback — answers you give to the short form after a session are stored without your name. We keep only an internal user ID, so that you can change your own answers while feedback is open. Speakers, volunteers and admins see the answers, without your name.
Prayer Bank (the Intercede tab) — the prayers, Masses, hours of adoration, days of fasting and decades of the Rosary you offer are counted in the app's own database, the same one as the rest of your app data. The community totals contain no personal data. Your personal tally is stored under your internal user ID only and contains no name. Guests contribute to the community totals only.
Feedback — anything you send us through the feedback form in the app.
Message GO Team — your messages and photos to the conference team, and the team's replies, are stored with your account, seen by the admin team, and deleted together with your account.
Members and direct messages — other signed-in members can see your name and country in the Members list, unless you turn off "Show me in Members" on your Profile. A direct message, including any image you attach, is stored with your name and profile photo and is visible only to you and the person you are writing to. You can delete your own messages, mute a conversation and block a person. A conversation is deleted, for both people, when either of them deletes their account.
Forms — when the conference team asks you to fill in a form (in the app or on our web forms page), your answers are stored with your account, and the team sees them together with your name and email address.
Map tiles are loaded from OpenFreeMap, which uses OpenStreetMap data; that tile server sees your IP address. The app does not use Google Maps. When you ask for walking directions, we hand off to the map app on your device.
We use your data to run the conference: to let you sign in, manage check-in, show your accommodation, respond to your feedback, and keep you informed. The legal bases are your consent under Art. 6(1)(a) GDPR (given at registration), the performance of your participation in the event under Art. 6(1)(b) GDPR, and our legitimate interest in the secure operation of the app under Art. 6(1)(f) GDPR.
We do not sell your data. The app contains no analytics, no advertising SDKs and no crash reporting.
These providers act as our processors: Google Firebase (Authentication, Cloud Firestore, Cloud Storage, Cloud Functions and Cloud Messaging), Google Cloud Vertex AI (duplicate detection in Live Q&A), Amazon Web Services SES (transactional emails such as account set-up and password links) and OpenFreeMap (map tiles). We disclose data to other third parties only where required by law.
Our database is hosted in the European Union. Other providers may process data outside the European Union. Where that happens, the transfer is protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses.
We keep your data for as long as your account exists and for the period needed to run GO 2026 and to meet our legal obligations. After that it is deleted.
You can delete your account yourself: Profile → Delete account, then type DELETE to confirm. This immediately deletes your sign-in account, your profile, your profile photo, your push token, your seat reservations, your feedback, your session feedback answers, your form answers, your reports of chat messages, any registration verification request made with your email address, the chat messages and chat images you posted, and your direct-message conversations. If yours is the last account linked to your conference registration, that registration is deleted too.
Two things remain, because they contain no personal data: anonymous Live Q&A questions and prayer counts. Your personal prayer tally carries no name, only an internal user ID, and once your account is deleted that ID no longer leads to anyone.
Volunteers and admins can also ask the conference team to delete an account. Deletion cannot be undone, and registration is closed, so a place at the conference cannot be restored from the app. More detail on our Data Deletion page.
Under the GDPR you have the right to access, rectify, erase, restrict or port your data, to object to processing, and to withdraw any consent at any time (without affecting processing carried out beforehand). You also have the right to lodge a complaint with a data-protection supervisory authority. To exercise these rights, contact jygermany@jesusyouth.org.
Family registrations may include minors. Data about children is provided and consented to by a parent or guardian, including the separate media consent for children.
Photographs and recordings from the event are used for official Jesus Youth communications only as covered by the Media Consent given at registration. To withdraw consent, contact jygermany@jesusyouth.org.
Your videos and photos may be used for Jesus Youth publications.
Access to personal data is restricted: sensitive operations are enforced on our servers, and administrative access is limited to authorised organisers.
We may update this policy from time to time. Material changes will be communicated in the app.
Jesus Youth International · jygermany@jesusyouth.org